Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/4d315d-63a8-44b0-b8a3-b774c3ea9dbb/1/qQcj6hJVTVL0ZzoaSHifPQWniaA.mft
File: qQcj6hJVTVL0ZzoaSHifPQWniaA.mft (raw, json)
Hash identifier: 5DAcIEHFJAqmBi3v2hdLTxaUrZzeoUY7IIwCKq/wQgE=
Subject key identifier: 67:4B:3C:E5:D8:2D:D9:17:FA:FE:FA:C3:B8:38:5F:8A:D8:5E:DE:4F
Authority key identifier: A9:07:23:EA:12:55:4D:52:F4:67:3A:1A:48:78:9F:3D:05:A7:89:A0
Certificate issuer: /CN=a90723ea12554d52f4673a1a48789f3d05a789a0
Certificate serial: 019758DB45CEFDBE406B079064E93F735F64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qQcj6hJVTVL0ZzoaSHifPQWniaA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/4d315d-63a8-44b0-b8a3-b774c3ea9dbb/1/qQcj6hJVTVL0ZzoaSHifPQWniaA.mft
Manifest number: 1215
Signing time: Tue 10 Jun 2025 08:00:54 +0000
Manifest this update: Tue 10 Jun 2025 08:00:54 +0000
Manifest next update: Wed 11 Jun 2025 08:00:54 +0000
Files and hashes: 1: qQcj6hJVTVL0ZzoaSHifPQWniaA.crl (hash: 2KczFK3Cu0p+F3xKDNTQssAqfsucby2U9/oBMswqjMg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/4d315d-63a8-44b0-b8a3-b774c3ea9dbb/1/qQcj6hJVTVL0ZzoaSHifPQWniaA.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/4d315d-63a8-44b0-b8a3-b774c3ea9dbb/1/qQcj6hJVTVL0ZzoaSHifPQWniaA.mft
rsync://rpki.ripe.net/repository/DEFAULT/qQcj6hJVTVL0ZzoaSHifPQWniaA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Jun 2025 08:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:58:db:45:ce:fd:be:40:6b:07:90:64:e9:3f:73:5f:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a90723ea12554d52f4673a1a48789f3d05a789a0
Validity
Not Before: Jun 10 08:00:54 2025 GMT
Not After : Jun 11 08:00:54 2025 GMT
Subject: CN=674b3ce5d82dd917fafefac3b8385f8ad85ede4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:19:a5:2a:95:c2:cf:39:90:ff:5b:11:21:21:
d0:2f:60:2b:b7:b7:f2:9d:e7:af:18:3e:26:6e:54:
8d:c5:c3:47:85:92:0a:f7:ad:18:de:71:9e:e4:b0:
80:44:4c:b0:aa:c0:91:b7:91:0f:b2:e1:12:3a:a5:
c3:c5:e4:57:bd:09:71:da:fd:9c:7e:d7:89:46:1a:
91:98:59:9b:d2:34:3a:91:fd:d3:ef:17:24:1a:d8:
e7:e4:db:01:b0:07:84:de:fa:8c:c6:6f:a8:6f:46:
06:6b:bf:30:72:c7:f4:47:6c:5f:8d:e6:da:07:d3:
43:ae:51:85:94:5d:61:73:41:7e:09:63:e3:ae:6a:
06:0c:68:a3:2d:97:a7:28:dd:e2:9b:2a:b0:4f:21:
c6:48:ce:38:fd:2b:19:e8:85:86:eb:25:cb:0a:53:
47:63:b3:9d:84:20:af:f7:36:e3:b3:53:09:05:72:
cd:de:fa:ca:65:01:a3:d4:b3:76:41:f8:a7:8a:18:
8d:73:d2:eb:a2:0a:57:75:81:95:ce:a9:7b:32:d2:
0d:02:0e:43:cf:22:82:3e:50:8b:77:c1:68:df:d3:
63:88:d5:57:4a:10:30:c1:9b:ac:7f:16:d0:22:82:
91:10:c8:83:ce:14:38:f0:59:4d:af:b4:29:14:3b:
cb:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:4B:3C:E5:D8:2D:D9:17:FA:FE:FA:C3:B8:38:5F:8A:D8:5E:DE:4F
X509v3 Authority Key Identifier:
keyid:A9:07:23:EA:12:55:4D:52:F4:67:3A:1A:48:78:9F:3D:05:A7:89:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qQcj6hJVTVL0ZzoaSHifPQWniaA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/4d315d-63a8-44b0-b8a3-b774c3ea9dbb/1/qQcj6hJVTVL0ZzoaSHifPQWniaA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/4d315d-63a8-44b0-b8a3-b774c3ea9dbb/1/qQcj6hJVTVL0ZzoaSHifPQWniaA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:1a:6f:6a:0c:25:d2:5d:0e:c6:a2:26:75:e0:52:d8:07:83:
54:45:1c:bb:38:f4:27:81:d0:9f:8b:c4:60:d3:d6:e6:5e:85:
3e:22:36:ca:ba:e4:45:4a:2b:63:3d:99:01:8a:9c:e3:0e:80:
4f:de:96:78:da:a5:fb:b5:3d:05:d9:e5:96:65:32:f4:22:7e:
cb:a0:72:21:54:74:f4:af:a3:73:38:ad:02:77:64:e2:53:f8:
d4:da:e6:d8:4a:7c:d2:25:47:80:d3:27:12:97:a8:d3:eb:38:
28:57:58:07:62:c9:20:f3:7c:77:44:29:9a:e9:50:e7:f2:65:
6c:0b:ed:1a:3c:4a:fc:49:60:17:9d:ea:86:55:c4:ca:19:47:
06:e4:e1:c3:70:a7:b3:42:a5:b0:6a:fa:45:e0:ec:8e:d6:d8:
74:38:9b:38:6d:d5:0f:ee:3a:ef:48:42:49:af:a4:19:d0:33:
e2:12:cf:ae:c3:ea:f4:b4:13:56:98:49:04:31:7a:6a:ed:0c:
bf:e2:0c:ce:2a:bf:08:85:14:08:08:a4:6c:33:f6:26:f0:4e:
af:68:1e:65:02:16:bd:a5:e5:fe:9a:f1:4b:d1:ee:d6:84:61:
cd:78:4e:d5:be:ea:3c:c5:3a:88:95:2b:36:08:5c:93:f5:45:
18:80:04:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 12:28:32 2025 by rpki-client